@azure/msal-common 14.0.3 → 14.1.0

package/src/error/ClientAuthErrorCodes.ts

@@ -0,0 +1,51 @@
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+
+export const clientInfoDecodingError = "client_info_decoding_error";
+export const clientInfoEmptyError = "client_info_empty_error";
+export const tokenParsingError = "token_parsing_error";
+export const nullOrEmptyToken = "null_or_empty_token";
+export const endpointResolutionError = "endpoints_resolution_error";
+export const networkError = "network_error";
+export const openIdConfigError = "openid_config_error";
+export const hashNotDeserialized = "hash_not_deserialized";
+export const invalidState = "invalid_state";
+export const stateMismatch = "state_mismatch";
+export const stateNotFound = "state_not_found";
+export const nonceMismatch = "nonce_mismatch";
+export const authTimeNotFound = "auth_time_not_found";
+export const maxAgeTranspired = "max_age_transpired";
+export const multipleMatchingTokens = "multiple_matching_tokens";
+export const multipleMatchingAccounts = "multiple_matching_accounts";
+export const multipleMatchingAppMetadata = "multiple_matching_appMetadata";
+export const requestCannotBeMade = "request_cannot_be_made";
+export const cannotRemoveEmptyScope = "cannot_remove_empty_scope";
+export const cannotAppendScopeSet = "cannot_append_scopeset";
+export const emptyInputScopeSet = "empty_input_scopeset";
+export const deviceCodePollingCancelled = "device_code_polling_cancelled";
+export const deviceCodeExpired = "device_code_expired";
+export const deviceCodeUnknownError = "device_code_unknown_error";
+export const noAccountInSilentRequest = "no_account_in_silent_request";
+export const invalidCacheRecord = "invalid_cache_record";
+export const invalidCacheEnvironment = "invalid_cache_environment";
+export const noAccountFound = "no_account_found";
+export const noCryptoObject = "no_crypto_object";
+export const unexpectedCredentialType = "unexpected_credential_type";
+export const invalidAssertion = "invalid_assertion";
+export const invalidClientCredential = "invalid_client_credential";
+export const tokenRefreshRequired = "token_refresh_required";
+export const userTimeoutReached = "user_timeout_reached";
+export const tokenClaimsCnfRequiredForSignedJwt =
+    "token_claims_cnf_required_for_signedjwt";
+export const authorizationCodeMissingFromServerResponse =
+    "authorization_code_missing_from_server_response";
+export const bindingKeyNotRemoved = "binding_key_not_removed";
+export const endSessionEndpointNotSupported =
+    "end_session_endpoint_not_supported";
+export const keyIdMissing = "key_id_missing";
+export const noNetworkConnectivity = "no_network_connectivity";
+export const userCanceled = "user_canceled";
+export const missingTenantIdError = "missing_tenant_id_error";
+export const methodNotImplemented = "method_not_implemented";

package/src/error/ClientConfigurationError.ts

@@ -3,394 +3,208 @@
  * Licensed under the MIT License.
  */
 
-import { ClientAuthError } from "./ClientAuthError";
+import { AuthError } from "./AuthError";
+import * as ClientConfigurationErrorCodes from "./ClientConfigurationErrorCodes";
+export { ClientConfigurationErrorCodes };
+
+export const ClientConfigurationErrorMessages = {
+    [ClientConfigurationErrorCodes.redirectUriEmpty]:
+        "A redirect URI is required for all calls, and none has been set.",
+    [ClientConfigurationErrorCodes.claimsRequestParsingError]:
+        "Could not parse the given claims request object.",
+    [ClientConfigurationErrorCodes.authorityUriInsecure]:
+        "Authority URIs must use https.  Please see here for valid authority configuration options: https://docs.microsoft.com/en-us/azure/active-directory/develop/msal-js-initializing-client-applications#configuration-options",
+    [ClientConfigurationErrorCodes.urlParseError]:
+        "URL could not be parsed into appropriate segments.",
+    [ClientConfigurationErrorCodes.urlEmptyError]: "URL was empty or null.",
+    [ClientConfigurationErrorCodes.emptyInputScopesError]:
+        "Scopes cannot be passed as null, undefined or empty array because they are required to obtain an access token.",
+    [ClientConfigurationErrorCodes.invalidPromptValue]:
+        "Please see here for valid configuration options: https://azuread.github.io/microsoft-authentication-library-for-js/ref/modules/_azure_msal_common.html#commonauthorizationurlrequest",
+    [ClientConfigurationErrorCodes.invalidClaims]:
+        "Given claims parameter must be a stringified JSON object.",
+    [ClientConfigurationErrorCodes.tokenRequestEmpty]:
+        "Token request was empty and not found in cache.",
+    [ClientConfigurationErrorCodes.logoutRequestEmpty]:
+        "The logout request was null or undefined.",
+    [ClientConfigurationErrorCodes.invalidCodeChallengeMethod]:
+        'code_challenge_method passed is invalid. Valid values are "plain" and "S256".',
+    [ClientConfigurationErrorCodes.pkceParamsMissing]:
+        "Both params: code_challenge and code_challenge_method are to be passed if to be sent in the request",
+    [ClientConfigurationErrorCodes.invalidCloudDiscoveryMetadata]:
+        "Invalid cloudDiscoveryMetadata provided. Must be a stringified JSON object containing tenant_discovery_endpoint and metadata fields",
+    [ClientConfigurationErrorCodes.invalidAuthorityMetadata]:
+        "Invalid authorityMetadata provided. Must by a stringified JSON object containing authorization_endpoint, token_endpoint, issuer fields.",
+    [ClientConfigurationErrorCodes.untrustedAuthority]:
+        "The provided authority is not a trusted authority. Please include this authority in the knownAuthorities config parameter.",
+    [ClientConfigurationErrorCodes.missingSshJwk]:
+        "Missing sshJwk in SSH certificate request. A stringified JSON Web Key is required when using the SSH authentication scheme.",
+    [ClientConfigurationErrorCodes.missingSshKid]:
+        "Missing sshKid in SSH certificate request. A string that uniquely identifies the public SSH key is required when using the SSH authentication scheme.",
+    [ClientConfigurationErrorCodes.missingNonceAuthenticationHeader]:
+        "Unable to find an authentication header containing server nonce. Either the Authentication-Info or WWW-Authenticate headers must be present in order to obtain a server nonce.",
+    [ClientConfigurationErrorCodes.invalidAuthenticationHeader]:
+        "Invalid authentication header provided",
+    [ClientConfigurationErrorCodes.cannotSetOIDCOptions]:
+        "Cannot set OIDCOptions parameter. Please change the protocol mode to OIDC or use a non-Microsoft authority.",
+    [ClientConfigurationErrorCodes.cannotAllowNativeBroker]:
+        "Cannot set allowNativeBroker parameter to true when not in AAD protocol mode.",
+    [ClientConfigurationErrorCodes.authorityMismatch]:
+        "Authority mismatch error. Authority provided in login request or PublicClientApplication config does not match the environment of the provided account. Please use a matching account or make an interactive request to login to this authority.",
+};
 
 /**
  * ClientConfigurationErrorMessage class containing string constants used by error codes and messages.
+ * @deprecated Use ClientConfigurationErrorCodes instead
  */
 export const ClientConfigurationErrorMessage = {
     redirectUriNotSet: {
-        code: "redirect_uri_empty",
-        desc: "A redirect URI is required for all calls, and none has been set.",
-    },
-    postLogoutUriNotSet: {
-        code: "post_logout_uri_empty",
-        desc: "A post logout redirect has not been set.",
+        code: ClientConfigurationErrorCodes.redirectUriEmpty,
+        desc: ClientConfigurationErrorMessages[
+            ClientConfigurationErrorCodes.redirectUriEmpty
+        ],
     },
     claimsRequestParsingError: {
-        code: "claims_request_parsing_error",
-        desc: "Could not parse the given claims request object.",
+        code: ClientConfigurationErrorCodes.claimsRequestParsingError,
+        desc: ClientConfigurationErrorMessages[
+            ClientConfigurationErrorCodes.claimsRequestParsingError
+        ],
     },
     authorityUriInsecure: {
-        code: "authority_uri_insecure",
-        desc: "Authority URIs must use https.  Please see here for valid authority configuration options: https://docs.microsoft.com/en-us/azure/active-directory/develop/msal-js-initializing-client-applications#configuration-options",
+        code: ClientConfigurationErrorCodes.authorityUriInsecure,
+        desc: ClientConfigurationErrorMessages[
+            ClientConfigurationErrorCodes.authorityUriInsecure
+        ],
     },
     urlParseError: {
-        code: "url_parse_error",
-        desc: "URL could not be parsed into appropriate segments.",
+        code: ClientConfigurationErrorCodes.urlParseError,
+        desc: ClientConfigurationErrorMessages[
+            ClientConfigurationErrorCodes.urlParseError
+        ],
     },
     urlEmptyError: {
-        code: "empty_url_error",
-        desc: "URL was empty or null.",
+        code: ClientConfigurationErrorCodes.urlEmptyError,
+        desc: ClientConfigurationErrorMessages[
+            ClientConfigurationErrorCodes.urlEmptyError
+        ],
     },
     emptyScopesError: {
-        code: "empty_input_scopes_error",
-        desc: "Scopes cannot be passed as null, undefined or empty array because they are required to obtain an access token.",
-    },
-    nonArrayScopesError: {
-        code: "nonarray_input_scopes_error",
-        desc: "Scopes cannot be passed as non-array.",
-    },
-    clientIdSingleScopeError: {
-        code: "clientid_input_scopes_error",
-        desc: "Client ID can only be provided as a single scope.",
+        code: ClientConfigurationErrorCodes.emptyInputScopesError,
+        desc: ClientConfigurationErrorMessages[
+            ClientConfigurationErrorCodes.emptyInputScopesError
+        ],
     },
     invalidPrompt: {
-        code: "invalid_prompt_value",
-        desc: "Supported prompt values are 'login', 'select_account', 'consent', 'create', 'none' and 'no_session'.  Please see here for valid configuration options: https://azuread.github.io/microsoft-authentication-library-for-js/ref/modules/_azure_msal_common.html#commonauthorizationurlrequest",
+        code: ClientConfigurationErrorCodes.invalidPromptValue,
+        desc: ClientConfigurationErrorMessages[
+            ClientConfigurationErrorCodes.invalidPromptValue
+        ],
     },
     invalidClaimsRequest: {
-        code: "invalid_claims",
-        desc: "Given claims parameter must be a stringified JSON object.",
+        code: ClientConfigurationErrorCodes.invalidClaims,
+        desc: ClientConfigurationErrorMessages[
+            ClientConfigurationErrorCodes.invalidClaims
+        ],
     },
     tokenRequestEmptyError: {
-        code: "token_request_empty",
-        desc: "Token request was empty and not found in cache.",
+        code: ClientConfigurationErrorCodes.tokenRequestEmpty,
+        desc: ClientConfigurationErrorMessages[
+            ClientConfigurationErrorCodes.tokenRequestEmpty
+        ],
     },
     logoutRequestEmptyError: {
-        code: "logout_request_empty",
-        desc: "The logout request was null or undefined.",
+        code: ClientConfigurationErrorCodes.logoutRequestEmpty,
+        desc: ClientConfigurationErrorMessages[
+            ClientConfigurationErrorCodes.logoutRequestEmpty
+        ],
     },
     invalidCodeChallengeMethod: {
-        code: "invalid_code_challenge_method",
-        desc: 'code_challenge_method passed is invalid. Valid values are "plain" and "S256".',
+        code: ClientConfigurationErrorCodes.invalidCodeChallengeMethod,
+        desc: ClientConfigurationErrorMessages[
+            ClientConfigurationErrorCodes.invalidCodeChallengeMethod
+        ],
     },
     invalidCodeChallengeParams: {
-        code: "pkce_params_missing",
-        desc: "Both params: code_challenge and code_challenge_method are to be passed if to be sent in the request",
+        code: ClientConfigurationErrorCodes.pkceParamsMissing,
+        desc: ClientConfigurationErrorMessages[
+            ClientConfigurationErrorCodes.pkceParamsMissing
+        ],
     },
     invalidCloudDiscoveryMetadata: {
-        code: "invalid_cloud_discovery_metadata",
-        desc: "Invalid cloudDiscoveryMetadata provided. Must be a stringified JSON object containing tenant_discovery_endpoint and metadata fields",
+        code: ClientConfigurationErrorCodes.invalidCloudDiscoveryMetadata,
+        desc: ClientConfigurationErrorMessages[
+            ClientConfigurationErrorCodes.invalidCloudDiscoveryMetadata
+        ],
     },
     invalidAuthorityMetadata: {
-        code: "invalid_authority_metadata",
-        desc: "Invalid authorityMetadata provided. Must by a stringified JSON object containing authorization_endpoint, token_endpoint, issuer fields.",
+        code: ClientConfigurationErrorCodes.invalidAuthorityMetadata,
+        desc: ClientConfigurationErrorMessages[
+            ClientConfigurationErrorCodes.invalidAuthorityMetadata
+        ],
     },
     untrustedAuthority: {
-        code: "untrusted_authority",
-        desc: "The provided authority is not a trusted authority. Please include this authority in the knownAuthorities config parameter.",
-    },
-    invalidAzureCloudInstance: {
-        code: "invalid_azure_cloud_instance",
-        desc: "Invalid AzureCloudInstance provided. Please refer MSAL JS docs: aks.ms/msaljs/azure_cloud_instance for valid values",
+        code: ClientConfigurationErrorCodes.untrustedAuthority,
+        desc: ClientConfigurationErrorMessages[
+            ClientConfigurationErrorCodes.untrustedAuthority
+        ],
     },
     missingSshJwk: {
-        code: "missing_ssh_jwk",
-        desc: "Missing sshJwk in SSH certificate request. A stringified JSON Web Key is required when using the SSH authentication scheme.",
+        code: ClientConfigurationErrorCodes.missingSshJwk,
+        desc: ClientConfigurationErrorMessages[
+            ClientConfigurationErrorCodes.missingSshJwk
+        ],
     },
     missingSshKid: {
-        code: "missing_ssh_kid",
-        desc: "Missing sshKid in SSH certificate request. A string that uniquely identifies the public SSH key is required when using the SSH authentication scheme.",
+        code: ClientConfigurationErrorCodes.missingSshKid,
+        desc: ClientConfigurationErrorMessages[
+            ClientConfigurationErrorCodes.missingSshKid
+        ],
     },
     missingNonceAuthenticationHeader: {
-        code: "missing_nonce_authentication_header",
-        desc: "Unable to find an authentication header containing server nonce. Either the Authentication-Info or WWW-Authenticate headers must be present in order to obtain a server nonce.",
+        code: ClientConfigurationErrorCodes.missingNonceAuthenticationHeader,
+        desc: ClientConfigurationErrorMessages[
+            ClientConfigurationErrorCodes.missingNonceAuthenticationHeader
+        ],
     },
     invalidAuthenticationHeader: {
-        code: "invalid_authentication_header",
-        desc: "Invalid authentication header provided",
+        code: ClientConfigurationErrorCodes.invalidAuthenticationHeader,
+        desc: ClientConfigurationErrorMessages[
+            ClientConfigurationErrorCodes.invalidAuthenticationHeader
+        ],
     },
     cannotSetOIDCOptions: {
-        code: "cannot_set_OIDCOptions",
-        desc: "Cannot set OIDCOptions parameter. Please change the protocol mode to OIDC or use a non-Microsoft authority.",
+        code: ClientConfigurationErrorCodes.cannotSetOIDCOptions,
+        desc: ClientConfigurationErrorMessages[
+            ClientConfigurationErrorCodes.cannotSetOIDCOptions
+        ],
     },
     cannotAllowNativeBroker: {
-        code: "cannot_allow_native_broker",
-        desc: "Cannot set allowNativeBroker parameter to true when not in AAD protocol mode.",
+        code: ClientConfigurationErrorCodes.cannotAllowNativeBroker,
+        desc: ClientConfigurationErrorMessages[
+            ClientConfigurationErrorCodes.cannotAllowNativeBroker
+        ],
     },
     authorityMismatch: {
-        code: "authority_mismatch",
-        desc: "Authority mismatch error. Authority provided in login request or PublicClientApplication config does not match the environment of the provided account. Please use a matching account or make an interactive request to login to this authority.",
+        code: ClientConfigurationErrorCodes.authorityMismatch,
+        desc: ClientConfigurationErrorMessages[
+            ClientConfigurationErrorCodes.authorityMismatch
+        ],
     },
 };
 
 /**
  * Error thrown when there is an error in configuration of the MSAL.js library.
  */
-export class ClientConfigurationError extends ClientAuthError {
-    constructor(errorCode: string, errorMessage?: string) {
-        super(errorCode, errorMessage);
+export class ClientConfigurationError extends AuthError {
+    constructor(errorCode: string) {
+        super(errorCode, ClientConfigurationErrorMessages[errorCode]);
         this.name = "ClientConfigurationError";
         Object.setPrototypeOf(this, ClientConfigurationError.prototype);
     }
+}
 
-    /**
-     * Creates an error thrown when the redirect uri is empty (not set by caller)
-     */
-    static createRedirectUriEmptyError(): ClientConfigurationError {
-        return new ClientConfigurationError(
-            ClientConfigurationErrorMessage.redirectUriNotSet.code,
-            ClientConfigurationErrorMessage.redirectUriNotSet.desc
-        );
-    }
-
-    /**
-     * Creates an error thrown when the post-logout redirect uri is empty (not set by caller)
-     */
-    static createPostLogoutRedirectUriEmptyError(): ClientConfigurationError {
-        return new ClientConfigurationError(
-            ClientConfigurationErrorMessage.postLogoutUriNotSet.code,
-            ClientConfigurationErrorMessage.postLogoutUriNotSet.desc
-        );
-    }
-
-    /**
-     * Creates an error thrown when the claims request could not be successfully parsed
-     */
-    static createClaimsRequestParsingError(
-        claimsRequestParseError: string
-    ): ClientConfigurationError {
-        return new ClientConfigurationError(
-            ClientConfigurationErrorMessage.claimsRequestParsingError.code,
-            `${ClientConfigurationErrorMessage.claimsRequestParsingError.desc} Given value: ${claimsRequestParseError}`
-        );
-    }
-
-    /**
-     * Creates an error thrown if authority uri is given an insecure protocol.
-     * @param urlString
-     */
-    static createInsecureAuthorityUriError(
-        urlString: string
-    ): ClientConfigurationError {
-        return new ClientConfigurationError(
-            ClientConfigurationErrorMessage.authorityUriInsecure.code,
-            `${ClientConfigurationErrorMessage.authorityUriInsecure.desc} Given URI: ${urlString}`
-        );
-    }
-
-    /**
-     * Creates an error thrown if URL string does not parse into separate segments.
-     * @param urlString
-     */
-    static createUrlParseError(
-        urlParseError: string
-    ): ClientConfigurationError {
-        return new ClientConfigurationError(
-            ClientConfigurationErrorMessage.urlParseError.code,
-            `${ClientConfigurationErrorMessage.urlParseError.desc} Given Error: ${urlParseError}`
-        );
-    }
-
-    /**
-     * Creates an error thrown if URL string is empty or null.
-     * @param urlString
-     */
-    static createUrlEmptyError(): ClientConfigurationError {
-        return new ClientConfigurationError(
-            ClientConfigurationErrorMessage.urlEmptyError.code,
-            ClientConfigurationErrorMessage.urlEmptyError.desc
-        );
-    }
-
-    /**
-     * Error thrown when scopes are empty.
-     * @param scopesValue
-     */
-    static createEmptyScopesArrayError(): ClientConfigurationError {
-        return new ClientConfigurationError(
-            ClientConfigurationErrorMessage.emptyScopesError.code,
-            `${ClientConfigurationErrorMessage.emptyScopesError.desc}`
-        );
-    }
-
-    /**
-     * Error thrown when client id scope is not provided as single scope.
-     * @param inputScopes
-     */
-    static createClientIdSingleScopeError(
-        inputScopes: Array<string>
-    ): ClientConfigurationError {
-        return new ClientConfigurationError(
-            ClientConfigurationErrorMessage.clientIdSingleScopeError.code,
-            `${ClientConfigurationErrorMessage.clientIdSingleScopeError.desc} Given Scopes: ${inputScopes}`
-        );
-    }
-
-    /**
-     * Error thrown when prompt is not an allowed type.
-     * @param promptValue
-     */
-    static createInvalidPromptError(
-        promptValue: string
-    ): ClientConfigurationError {
-        return new ClientConfigurationError(
-            ClientConfigurationErrorMessage.invalidPrompt.code,
-            `${ClientConfigurationErrorMessage.invalidPrompt.desc} Given value: ${promptValue}`
-        );
-    }
-
-    /**
-     * Creates error thrown when claims parameter is not a stringified JSON object
-     */
-    static createInvalidClaimsRequestError(): ClientConfigurationError {
-        return new ClientConfigurationError(
-            ClientConfigurationErrorMessage.invalidClaimsRequest.code,
-            ClientConfigurationErrorMessage.invalidClaimsRequest.desc
-        );
-    }
-
-    /**
-     * Throws error when token request is empty and nothing cached in storage.
-     */
-    static createEmptyLogoutRequestError(): ClientConfigurationError {
-        return new ClientConfigurationError(
-            ClientConfigurationErrorMessage.logoutRequestEmptyError.code,
-            ClientConfigurationErrorMessage.logoutRequestEmptyError.desc
-        );
-    }
-
-    /**
-     * Throws error when token request is empty and nothing cached in storage.
-     */
-    static createEmptyTokenRequestError(): ClientConfigurationError {
-        return new ClientConfigurationError(
-            ClientConfigurationErrorMessage.tokenRequestEmptyError.code,
-            ClientConfigurationErrorMessage.tokenRequestEmptyError.desc
-        );
-    }
-
-    /**
-     * Throws error when an invalid code_challenge_method is passed by the user
-     */
-    static createInvalidCodeChallengeMethodError(): ClientConfigurationError {
-        return new ClientConfigurationError(
-            ClientConfigurationErrorMessage.invalidCodeChallengeMethod.code,
-            ClientConfigurationErrorMessage.invalidCodeChallengeMethod.desc
-        );
-    }
-
-    /**
-     * Throws error when both params: code_challenge and code_challenge_method are not passed together
-     */
-    static createInvalidCodeChallengeParamsError(): ClientConfigurationError {
-        return new ClientConfigurationError(
-            ClientConfigurationErrorMessage.invalidCodeChallengeParams.code,
-            ClientConfigurationErrorMessage.invalidCodeChallengeParams.desc
-        );
-    }
-
-    /**
-     * Throws an error when the user passes invalid cloudDiscoveryMetadata
-     */
-    static createInvalidCloudDiscoveryMetadataError(): ClientConfigurationError {
-        return new ClientConfigurationError(
-            ClientConfigurationErrorMessage.invalidCloudDiscoveryMetadata.code,
-            ClientConfigurationErrorMessage.invalidCloudDiscoveryMetadata.desc
-        );
-    }
-
-    /**
-     * Throws an error when the user passes invalid cloudDiscoveryMetadata
-     */
-    static createInvalidAuthorityMetadataError(): ClientConfigurationError {
-        return new ClientConfigurationError(
-            ClientConfigurationErrorMessage.invalidAuthorityMetadata.code,
-            ClientConfigurationErrorMessage.invalidAuthorityMetadata.desc
-        );
-    }
-
-    /**
-     * Throws error when provided authority is not a member of the trusted host list
-     */
-    static createUntrustedAuthorityError(): ClientConfigurationError {
-        return new ClientConfigurationError(
-            ClientConfigurationErrorMessage.untrustedAuthority.code,
-            ClientConfigurationErrorMessage.untrustedAuthority.desc
-        );
-    }
-
-    /**
-     * Throws error when the AzureCloudInstance is set to an invalid value
-     */
-    static createInvalidAzureCloudInstanceError(): ClientConfigurationError {
-        return new ClientConfigurationError(
-            ClientConfigurationErrorMessage.invalidAzureCloudInstance.code,
-            ClientConfigurationErrorMessage.invalidAzureCloudInstance.desc
-        );
-    }
-
-    /**
-     * Throws an error when the authentication scheme is set to SSH but the SSH public key is omitted from the request
-     */
-    static createMissingSshJwkError(): ClientConfigurationError {
-        return new ClientConfigurationError(
-            ClientConfigurationErrorMessage.missingSshJwk.code,
-            ClientConfigurationErrorMessage.missingSshJwk.desc
-        );
-    }
-
-    /**
-     * Throws an error when the authentication scheme is set to SSH but the SSH public key ID is omitted from the request
-     */
-    static createMissingSshKidError(): ClientConfigurationError {
-        return new ClientConfigurationError(
-            ClientConfigurationErrorMessage.missingSshKid.code,
-            ClientConfigurationErrorMessage.missingSshKid.desc
-        );
-    }
-
-    /**
-     * Throws error when provided headers don't contain a header that a server nonce can be extracted from
-     */
-    static createMissingNonceAuthenticationHeadersError(): ClientConfigurationError {
-        return new ClientConfigurationError(
-            ClientConfigurationErrorMessage.missingNonceAuthenticationHeader.code,
-            ClientConfigurationErrorMessage.missingNonceAuthenticationHeader.desc
-        );
-    }
-
-    /**
-     * Throws error when a provided header is invalid in any way
-     */
-    static createInvalidAuthenticationHeaderError(
-        invalidHeaderName: string,
-        details: string
-    ): ClientConfigurationError {
-        return new ClientConfigurationError(
-            ClientConfigurationErrorMessage.invalidAuthenticationHeader.code,
-            `${ClientConfigurationErrorMessage.invalidAuthenticationHeader.desc}. Invalid header: ${invalidHeaderName}. Details: ${details}`
-        );
-    }
-
-    /**
-     * Throws error when provided non-default OIDCOptions when not in OIDC protocol mode
-     */
-    static createCannotSetOIDCOptionsError(): ClientConfigurationError {
-        return new ClientConfigurationError(
-            ClientConfigurationErrorMessage.cannotSetOIDCOptions.code,
-            ClientConfigurationErrorMessage.cannotSetOIDCOptions.desc
-        );
-    }
-
-    /**
-     * Throws error when allowNativeBroker is set to true when not in AAD protocol mode
-     */
-    static createCannotAllowNativeBrokerError(): ClientConfigurationError {
-        return new ClientConfigurationError(
-            ClientConfigurationErrorMessage.cannotAllowNativeBroker.code,
-            ClientConfigurationErrorMessage.cannotAllowNativeBroker.desc
-        );
-    }
-
-    /**
-     * Create an error when the authority provided in request does not match authority provided in account or MSAL.js configuration.
-     */
-    static createAuthorityMismatchError(): ClientConfigurationError {
-        return new ClientConfigurationError(
-            ClientConfigurationErrorMessage.authorityMismatch.code,
-            ClientConfigurationErrorMessage.authorityMismatch.desc
-        );
-    }
+export function createClientConfigurationError(
+    errorCode: string
+): ClientConfigurationError {
+    return new ClientConfigurationError(errorCode);
 }

package/src/error/ClientConfigurationErrorCodes.ts

@@ -0,0 +1,28 @@
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+
+export const redirectUriEmpty = "redirect_uri_empty";
+export const claimsRequestParsingError = "claims_request_parsing_error";
+export const authorityUriInsecure = "authority_uri_insecure";
+export const urlParseError = "url_parse_error";
+export const urlEmptyError = "empty_url_error";
+export const emptyInputScopesError = "empty_input_scopes_error";
+export const invalidPromptValue = "invalid_prompt_value";
+export const invalidClaims = "invalid_claims";
+export const tokenRequestEmpty = "token_request_empty";
+export const logoutRequestEmpty = "logout_request_empty";
+export const invalidCodeChallengeMethod = "invalid_code_challenge_method";
+export const pkceParamsMissing = "pkce_params_missing";
+export const invalidCloudDiscoveryMetadata = "invalid_cloud_discovery_metadata";
+export const invalidAuthorityMetadata = "invalid_authority_metadata";
+export const untrustedAuthority = "untrusted_authority";
+export const missingSshJwk = "missing_ssh_jwk";
+export const missingSshKid = "missing_ssh_kid";
+export const missingNonceAuthenticationHeader =
+    "missing_nonce_authentication_header";
+export const invalidAuthenticationHeader = "invalid_authentication_header";
+export const cannotSetOIDCOptions = "cannot_set_OIDCOptions";
+export const cannotAllowNativeBroker = "cannot_allow_native_broker";
+export const authorityMismatch = "authority_mismatch";